ingress_white

template/prd/argocd_v2.12.3/3_apply/ing.yaml

@@ -8,7 +8,12 @@ metadata:
     #nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
     nginx.ingress.kubernetes.io/backend-protocol: "https"
     nginx.ingress.kubernetes.io/ssl-passthrough: "true"
-    nginx.ingress.kubernetes.io/whitelist-source-range: "10.0.0.0/24,10.1.0.0/16,106.254.240.2/32,10.140.224.0/24"
+    nginx.ingress.kubernetes.io/whitelist-source-range: |
+      114.110.128.150/32,
+      114.110.128.46/32,
+      114.110.132.4/32,
+      114.110.132.5/32,
+      106.254.240.2/32
 spec:
   ingressClassName: nginx
   rules:

template/prd/calico_v3.28.2/custom-resources.yaml

@@ -14,6 +14,7 @@ spec:
       encapsulation: VXLAN         # openstack 에서는 VXLAN을 사용해야해안다 byljh
       natOutgoing: Enabled
       nodeSelector: all()
+  kubeletVolumePluginPath: /mnt/vdb/kubelet # calico가 사용하는 kubelet volume path
 
 ---
 

template/prd/ddn/ddn-install-running/exa-csi-driver-2.3.5/deploy/kubernetes/exascaler-csi-file-driver.yaml

@@ -372,12 +372,12 @@ spec:
           args:
             - --v=5
             - --csi-address=/csi/csi.sock
-            - --kubelet-registration-path=/var/lib/kubelet/plugins/exa.csi.ddn.com/csi.sock
+            - --kubelet-registration-path=/mnt/vdb/kubelet/plugins/exa.csi.ddn.com/csi.sock
           livenessProbe:
             exec:
               command:
               - /csi-node-driver-registrar
-              - --kubelet-registration-path=/var/lib/kubelet/plugins/exa.csi.ddn.com/csi.sock
+              - --kubelet-registration-path=/mnt/vdb/kubelet/plugins/exa.csi.ddn.com/csi.sock
               - --mode=kubelet-registration-probe
             initialDelaySeconds: 30
             timeoutSeconds: 15
@@ -417,20 +417,20 @@ spec:
               mountPath: /host
               mountPropagation: Bidirectional
             - name: pods-mount-dir
-              mountPath: /var/lib/kubelet/pods
+              mountPath: /mnt/vdb/kubelet/pods
               mountPropagation: Bidirectional
       volumes:
         - name: socket-dir
           hostPath:
-            path: /var/lib/kubelet/plugins/exa.csi.ddn.com
+            path: /mnt/vdb/kubelet/plugins/exa.csi.ddn.com
             type: DirectoryOrCreate
         - name: registration-dir
           hostPath:
-            path: /var/lib/kubelet/plugins_registry/
+            path: /mnt/vdb/kubelet/plugins_registry/
             type: Directory
         - name: pods-mount-dir
           hostPath:
-            path: /var/lib/kubelet/pods
+            path: /mnt/vdb/kubelet/pods
             type: Directory
         - name: host
           hostPath:

template/prd/ddn/exa-csi-driver/examples/sc.yaml

@@ -5,8 +5,11 @@
 apiVersion: storage.k8s.io/v1
 kind: StorageClass
 metadata:
-  name: user-nas
+  name: component-nas
+  annotations:
+    storageclass.kubernetes.io/is-default-class: "true"
 provisioner: exa.csi.ddn.com
 parameters:
   # projectId: "100001"          # Points to a project id to be used to set volume quota.
   # bindMount: "false"
+reclaimPolicy: Retain

template/prd/ddn/internal-nas.yaml

@@ -0,0 +1,9 @@
+apiVersion: storage.k8s.io/v1
+kind: StorageClass
+metadata:
+  name: internal-nas
+provisioner: exa.csi.ddn.com
+parameters:
+  # projectId: "100001"          # Points to a project id to be used to set volume quota.
+  # bindMount: "false"
+

template/prd/ddn/sc.yaml

@@ -0,0 +1,12 @@
+apiVersion: storage.k8s.io/v1
+kind: StorageClass
+metadata:
+  name: component-nas
+  annotations:
+    storageclass.kubernetes.io/is-default-class: "true"
+provisioner: exa.csi.ddn.com
+parameters:
+  # projectId: "100001"          # Points to a project id to be used to set volume quota.
+  # bindMount: "false"
+reclaimPolicy: Retain
+

template/prd/ddn/user-nas.yaml

@@ -0,0 +1,9 @@
+apiVersion: storage.k8s.io/v1
+kind: StorageClass
+metadata:
+  name: user-nas
+provisioner: exa.csi.ddn.com
+parameters:
+  # projectId: "100001"          # Points to a project id to be used to set volume quota.
+  # bindMount: "false"
+

template/prd/ingress-nginx/2_configmap/configmap.yaml

@@ -2,6 +2,7 @@
 apiVersion: v1
 data:
   allow-snippet-annotations: "true"
+  use-proxy-protocol: "true"
 kind: ConfigMap
 metadata:
   labels: